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Abstract  In  this  paper,  we  investigate  the  properties  of  generalized  bent  functions  defined 
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Maiorana-McFarland  type  bent  functions  and  Dillon’s  functions  in  the  generalized  set  up.  A 
class  of  bent  functions  called  generalized  spreads  is  introduced  and  we  show  that  it  contains 
all  Dillon  type  generalized  bent  functions  and  Maiorana-McFarland  type  generalized  bent 
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The  crosscorrelation  spectrum  of  generalized  Dillon  type  bent  functions  is  also  characterized. 
We  further  characterize  generalized  bent  Boolean  functions  defined  on  ZJJ  with  values  in  Z4 
and  Zg.  Moreover,  we  propose  several  constructions  of  such  generalized  bent  functions  for 
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1  Introduction 

In  the  recent  years  several  authors  have  proposed  generalizations  of  Boolean  functions  [10, 
15, 16, 18, 19]  and  studied  the  effect  of  Walsh-Hadamard  transform  on  these  classes.  As  in 
the  Boolean  case,  in  the  generalized  setup  the  functions  which  have  flat  spectra  with  respect 
to  the  Walsh-Hadamard  transform  are  said  to  be  generalized  bent  and  are  of  special  interest 
(the  classical  notion  was  invented  by  Rothaus  [13]). 

Let  us  denote  the  set  of  integers,  real  numbers  and  complex  numbers  by  Z,  R  and  C, 
respectively  and  let  the  ring  of  integers  modulo  r  be  denoted  by  Zr.  The  vector  space  ZJ}  is 
the  space  of  all  n -tuples  x  =  (xn,  . . . ,  x\)  of  elements  from  Z2  with  the  standard  operations. 
By  *+’  we  denote  the  addition  over  Z,  R  and  C,  whereas  ‘0’  denotes  the  addition  over  ZJJ 
for  all  n  >  1.  Addition  modulo  q  is  denoted  by  *+’  and  it  is  understood  from  the  context. 
If  x  =  (xn,  ...  ,x\)  and  y  =  (yn,  . . . ,  yi)  are  in  ZJ},  we  define  the  scalar  (or  inner)  product 
by  x  •  y  =  xnyn  0  •  •  •  0  X2yi  0  x\y\.  The  cardinality  of  the  set  S  is  denoted  by  \S\,  and 
the  conjugate  of  a  bit  b  will  also  be  denoted  by  b.  If  z  =  a  +  b  1  g  C,  then  \z\  =  s/a2  +  b2 
denotes  the  absolute  value  of  z,  and  z  =  a  —  bi  denotes  the  complex  conjugate  of  z,  where 
1 2  =  —1,  and  a,b  e  R. 

We  call  a  function  from  ZJJ  to  Z  q(q  >  2  a  positive  integer)  a  generalized  Boolean  function 
on  n  variables  [16].  We  denote  the  set  of  such  functions  by  QB&.  If  q  =  2,  we  obtain  the 
classical  Boolean  functions  on  n  variables,  whose  set  will  be  denoted  by  Bn. 

Let  f  =  e2jzltq  be  the  complex  g -primitive  root  of  unity.  The  (generalized)  Walsh-Had¬ 
amard  transform  of  /  €  QBn  at  any  point  u  €  ZJJ  is  the  complex  valued  function 

Hf(u)  =  2"  2  ^^(x)(-l)u'x. 

xeZ^ 

If  q  =  2,  we  obtain  the  (normalized)  Walsh-Hadamard  transform  of  /  g  Bn,  which  will  be 
denoted  by  Wf.  A  function  /  €  QBn  is  a  generalized  bent  (, gbent )  function  if  \7if(u)\  =  1 
for  all  u  e  ZJ.  When  q  =  2,  then  /  is  bent  (these  exist  for  n  even,  only).  If  n  is  odd,  a 
function  f  e  Bn  is  said  to  be  semibent  if  and  only  if  |  W/(u)\  g  {0,  V2},  for  all  u  g  Z^. 
Suppose  f  e  QBn  is  a  gbent  function  such  that  for  every  such  u,  we  have  7i / (u)  =  t,ku ,  for 
some  0  <  ku  <  q.  Then,  for  such  a  gbent  function  /,  there  is  a  function  F  :  Z2  — >  7Lq  such 
that  t;F  =1 if.  We  call  such  a  function  F  the  dual  of  /  ( Caution :  only  some  gbent  functions 
admit  duals).  By  applying  Theorem  1  below,  one  can  easily  see  that  the  dual  of  a  gbent  func¬ 
tion  is  also  gbent,  since  the  Walsh-Hadamard  transform  of  the  dual  F  is  Hf(W)  = 

The  sum 

Cf,g{ Z)  =  Yj  £/(x)-*(xez) 

xeZ^ 

is  the  crosscorrelation  of  /  and  g  at  z.  The  autocorrelation  of  /  G  QBn  at  u  G  Z2  is  C /,/(u) 
above,  which  we  denote  by  Cf  (u). 

If  2h~l  <  q  <  2h,  for  any  /  g  QBn  we  associate  a  unique  sequence  of  Boolean  functions 
ai  g  Bn{i  =  0,  1,  . . . ,  h  —  1)  such  that 

/(x)  =  00 (x)  +  2a\ (x)  +  •  •  •  +  2h~1ah-\(x),  for  all  x  g  Z^.  (1) 

If  q  =  4,  then  for  /  g  as  in  (1)  we  define  the  Gray  map  ^(/)  :  QBAn  ->  by 

^(/)(z,  x)  =  0o(x)z  +  ai(x),  for  all  (z,  x)  g  Z2  x  Z^.  (2) 

The  function  ^r(/)  is  referred  to  as  the  Gray  image  of  /. 
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2  Properties  of  Walsh-Hadamard  transform  on  generalized  Boolean  functions 

The  following  properties  of  the  Walsh-Hadamard  transform  on  generalized  Boolean  func¬ 
tions  are  similar  to  the  Boolean  function  case. 

Theorem  1  We  have: 

(/)  Let  f  g  QBn-  The  inverse  of  the  Walsh-Hadamard  transform  is  given  by 

sm=  2-5  Y  W/(u)(-l)u-5\ 

ueZ^ 

Further,  Cfig( u)  =  Cgj(u),  for  all  u  g  ZJJ,  which  implies  that  C/(u)  is  always  real, 
(ii)  If  f,  g  G  <5 £>55, 


Y  C/.«(u)(- Dux  =  2 

ueZj} 

C/,^(u)  =  ^  Tif  (x)TLg (x) (—  l)ux. 

xeZ^ 

(i/i)  Taking  the  particular  case  f  =  g  we  obtain  C/(u)  =  |W/(x)|2(-l)u'x. 

xeZj 

(iv)  If  f  G  <5 £>55,  f/ien  /  w  a  gbent  function  if  and  only  i/C/(u)  = 

(u)  Moreover,  the  ( generalized )  Parseval’s  identity  holds  |7Y/(x)|2  =  2W. 

xeZj 

The  properties  of  these  transforms  for  g  =  2  can  be  derived  from  the  previous  theorem  (for 
more  on  Boolean  functions,  the  interested  reader  can  consult  [5-7]). 

Let  f  =  e2;n/^  be  the  g -primitive  root  of  unity,  and  /  :  ZJJ  — ►  Z^  as  in  (1).  It  turns  out  that 
the  generalized  Walsh-Hadamard  spectrum  of  /  can  be  described  (albeit,  in  a  complicated 
manner)  in  terms  of  the  Walsh-Hadamard  spectrum  of  its  Boolean  components  ai . 

Theorem  2  The  Walsh-Hadamard  transform  of  f  :  ZJJ  — >  T>q,  2h~l  <  q  <  2h,  where 
/(x)  =  Xf=o  «i(x)2!,  a;  e  «  given  fey 

«/(“)  =  X  Z 

/c{0, JC.I,KC.I 


2n  if  u  =  0, 
0  ifu  #  0. 


Proof  For  brevity,  we  use  the  notations  &  :=  t, 2? .  It  is  easy  to  see  that,  for  s  g  Z2,  we  have 


1 +  (-!)*  ,  l-(-l)5 
- ^ - 1 - ^ - z, 


(3) 


and  so,  we  have  the  identities  ^  ^  (A/  +  Ajf/),  where  A/  =  1  +  (— l)a/(x\  Aj  =  1  — 

(—  l)^'(x),  and  the  complement  /  :=  {0,  1,  . . . ,  h  —  1  }\7,  for  some  subset  /  of  {0,  1,  . . . ,  h  — 
1}.  The  Walsh-Hadamard  coefficients  of  /  are 
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2n'2Hf(u)  =  ^f/W(-l)ux  = 

X  X 

=z<-»u,n(f2T" 

x  /=0 

h- 1  1 

= Z(-i>ux  n  $  0 + (-i)fl,(x) + (i  -  (-i)aiW)^) 

X  i= 0 

=  2-^(-i)ux  X  n  £A!A; 

X  /c{0,...,/i-l}ze/)JG/ 

=2-/,^(-dux  ^  rZie,2‘  n 

X  /C{0,...,/Z-1}  ieljel 

—  2~h  1)U  X  ^Z/e/2* 

x  /c{0,...,/*-l}  J<zi,Kcj 

=  i~h  £  x  (-D|y|I>iri(-1)  Z^e/ux  ^(x)^ 

/c{0,...,/z-l}  JQI,KcJ  x 

and  so,  we  obtain  our  result.  □ 

In  Sect.  7  we  will  use  this  result,  for  the  particular  case  q  =  8,  which  will  allow  us  to 
completely  describe  the  gbent  Boolean  functions  in  that  case. 


3  Characterization  and  affine  transformations  of  generalized  bent  functions 


Let  v  =  (vr, . . . ,  ui).  We  define 

f\(xn—ri  •  •  •  ?  ^l)  —  f  C =  •  •  •  ?  %n—r+ 1  —  ^1?  %n—  r?  •  •  •  ?  ^l)* 

Let  u  =  (ur,  •  •  • ,  mi)  €  U2  and  w  =  (wn-r, . . . ,  wi)  g  ZjpZ  We  define  the  vector  concat¬ 
enation  by 


uw  :=  (ur,  .  .  .  ,  Ml,  Wn—r ,  .  .  .  ,  tui). 

Two  functions  /,  g  g  are  said  to  have  complementary  autocorrelation  if  and  only  if 
Cf( u)  +  Cg (u)  =  0  for  all  u  g  Z^fO}. 

The  next  two  results  were  shown  in  a  different  context  in  [17].  One  can  straightforwardly 
infer,  by  modifying  those  proofs  that  these  result  hold  under  the  current  notions,  as  well. 

Lemma  3  Let  u  G  TI2,  w  G  Z2~r  and  f  be  an  n -variable  generalized  Boolean  function. 
Then 

Cf  (uw)  =  Z  C/v./vf Bu(W)- 
veZ^ 

In  particular,  for  r  =  1,  C/( Ow)  =  C/0(w)  +  C /,  (w),  and  C/(lw)  =  27?^[C/0;/1  (w)]. 
Further,  f,g  g  complementary  autocorrelation  if  and  only  if 

\Hf{u)\2  +  |-«g(u)|2  =  2,  for  all  U€  TLnv 
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Theorem  4  If  n  is  a  positive  integer  and  h  is  an  {n  +  \) -variable  generalized  Boolean 
function,  we  write 

h(xn+ i,xn,  .  ..,xi)  =  (1  ©x„+i  )/(*„,  +xn+\g(xn,  . 

Then  the  following  statements  are  equivalent: 

(a)  h  is  gbent. 

(, b )  /  and  g  have  complementary  autocorrelation  and  Re[Cf,g( w)]  =  0. 

(c)  \H/(u)\2  +  \Hg(u)\2  =  2,  for  all  u  e  Z2  and  €  R i  whenever  \Hf(u)\\ 

Hg{  u)|#0. 


Theorem  5  Let  /,  g  be  two  generalized  Boolean  functions  in  n  variables,  where 
g(x)  =  /(Ax  0  a)  +  c  b  •  x  +  d,  where  A  e  GL( 2,  n),  a,  b  e  Z2,  d  e  Zq, 


and  €  = 


0,  q/2 
0 


if  q  is  even 

.  Then  f  is  gbent  if  and  only  if  g  is  gbent. 

if  q  is  odd 


Proof  Let  B  =  A  1 .  We  show  the  theorem  when  q  is  even  and  c  =  q/2,  since  the  other 

q_ 

cases  are  absolutely  similar.  Using  f  2  =  —1,  we  compute  the  Walsh-Hadamard  transform 
of  g  at  z  ©  Z2, 


Hg( z)  =  2~i  V  p^xm)+qJbx+d^_lyx 

xeZ^ 

—  2 -%i;d  ^  ^/(Ax©a)^_^(z©b)-x 

xe%2 

—  l)5r(b©z)'a  ^  ^./(x)^_^5r(b©z)-x 

xe%2 

=  i;d(-l)BT(b®z)aHf(BT(b®z)), 

which  concludes  our  proof.  □ 


4  Generalized  bent  functions  symmetric  about  two  variables 

A  generalized  Boolean  function  h  ©  Q8qn+2  is  symmetric  with  respect  to  two  variables  y  and 
z  if  and  only  if  there  exist  /,  g,  s  ©  Q8q  such  that 

h(z,  y,  x)  =  /(x)  +  (y  ©  z)g(x)  +  yzs(x)  (4) 

where  y,z  e  Z2  and  x  e  Z2  and  Z^+2  is  identified  with  Z2  x  Z2  x  Z2.  The  binary  case, 
that  is,  q  =  2,  is  investigated  by  Zhao  and  Li  [20].  In  the  following  theorem  we  obtain  a 
generalization  of  their  main  result. 

Theorem  6  Suppose  that  q  is  a  positive  integer.  Let  h  be  a  generalized  Boolean  function 
symmetric  about  two  variables,  as  in  (4).  Then  h  is  gbent  if  and  only  if  /,  /  +  g  are  gbent 
and  s(x)  =  |  ( and  consequently,  q  must  be  even ). 


Springer 


P.  Stanica  et  al. 


Proof  Let  A (F)  =  F(x)  —  F(x  ®  u).  Now,  for  a  function  h  as  in  (4), 

h(z,  y,  x)  -  h((z,  y,  x)  ©  (< a ,  b ,  u))  =  /(x)  +  (y  0  z)g(x)  +  yzs(x) 

-/(x  0u)-(y0z0<20  b)g(x  0  u)  -  (z  0  a)(y  0  b)s(x  0  u) 

=  A (/)  +  (y  0  z)A(g)  +  yz  A(s)  -(<2  0  &)g(x  0  u)  -  (ay  0  bz  0  <2&>(x  0  u), 


and  the  autocorrelation 


Ch(a,  b ,  u) 


Z 


^  A(/)+(j©z)A(g)-(«©Z?)<g(x©u)+jz.s(x)-(z©«)();©Z7)1s(x©u) 


(y,z,x)sZ"+2 


(5) 


Assume  that  h  is  gbent  on  Z"+2,  and  so,  in  particular  Cf  (1 ,  1,0)  =0.  Replace  a  =  b  =  1 
and  u  =  0  in  Eq.  5,  and  since  A(/)  =  0  if  u  =  0,  we  get 


C*(1,1,0)  =  Z  ^(jz-yzMx)  _  zz 

(y,z,x)eZ^+2  xeZ" 

=  Z(ri(x)+r(x)  +  2)=  Z  °+  Z  Z  *». 

xeZ"  x:s(x)=§  /eZ9\{§}  x:s(x)=/ 

2.711 

which  follows  from  the  following  relations  (since  ^  =  e  ^  ) 

ki  =  ?l  +  ?~l  +  2  =  0  <£>  =  -1  -©•  /  =  |,  and 

k,  =  t}  +  rl  +  2  =  2  ^1  +  cos  e  (0, 4],  if  /  /  |. 

Since  C/*(l,  1,0)  =  0  it  follows  that  ^(x)  =  |  for  every  x  e  ZJJ.  Further,  using  s(x)  = 
(5),  we  obtain 


Ch(a,b,  u)  =  Z  £A(/)-(fl©Z?)g(x©u)  ^.(};©z)A((g)+3;zA(x)-(z©a)(3;©Z?)^(x©u) 

*eZ!(  (y,z)eZ| 

_  £■ A(/)-(a©fe)g(x©u)  ^-afei(x©u)  _|_  £. A(g)-feai(x©u) 


xeZ~ 
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Moreover, 

ch( o,  0,u)=  X  ?A(/)(2  +  2c A(S))  =  2C/(U)  +  2C/+^«); 

xeZ^ 

C*(0,  1,  u)  =  ^  ^A(/)(^Ate)  +  £AW-I)  =  0; 
xeZ^ 

Chi  1,  0,  u)  =  ^  ?' A(/)KA(s)  +  =  0; 

XGZ2 

0,(1,  1,  u)  =  £  ?' a(/)(-2  +  2f  ■ A<*>)  =  -2C/(u)  +  2C/+,(u). 

xeZ^ 

Now,  since  /i  is  gbent,  then  (0,  0,  u)  =  C^(l,  1,  u)  =  0,  from  which  we  derive  that 
Cf  (u)  =  Cf+g(u)  =  0  (if  u  7^  0)  and  so,  both  /,  /  +  g  are  gbent. 

Conversely,  we  assume  that  both  /,  /  +  g  are  gbent  and  s  (x)  =  | .  From  Eq.  6,  we  obtain 
that  0,(0,  0,  0)  =  2C f  (0)  +  2C/+g(0)  =  2  •  2”  +  2  •  2”  =  2n+2,  and  Ch(z,  y,  u)  =  0,  when 
(z,  y,  u)  7^  (0,  0,  0).  The  theorem  is  proved.  □ 

For  g  =  0,  we  have  the  following  corollary. 

Corollary  7  Let  h  :  Z2  x  Z2  x  ZJ  — >  Z q  (n  even)  be  the  generalized  Boolean  function 
( symmetric  with  respect  to  two  variables  y,  z)  given  by  h(z,  y,  x)  =  /(x)  +  |  yzfor  all  x  6 
ZJJ  ,y,z  €  Z2,  where  f  :  ZJ5  — >  Z^  w  an  arbitrary  generalized  Boolean  function.  Then  h  is 
gbent  if  and  only  if  f  is  gbent. 


5  Generalized  Maiorana-McFarland  and  Dillon  functions  are  contained  in  the 
generalized  spreads  class 

Let  fs  denote  the  indicator  function  of  any  subset  S  of  ZJJ . 

In  Theorem  8  below  we  generalize  a  result  of  Schmidt  [15,  Theorem  5.3]  (obtained  for 
q  =  4).  The  class  of  functions  (7)  below  is  referred  to  as  the  generalized  Maiorana-McFar¬ 
land  class  ( GMMF ). 

Theorem  8  Suppose  that  q  is  an  even  positive  integer.  Let  o  be  a  permutation  on  Z^,  and 
let  g  :  Z2  —>  Zq  be  an  arbitrary  function.  Then  the  function  f  :  l2ff  —>  Zq  defined  as 

fix,  y)  =  g(y)  +  |  x  •  a  (y). for  all  x,  y  (7) 

is  a  gbent  function  and  its  dual  is  g(or_1(x))  +  |y  •  (cr-1(x)). 

Proof  Compute 

Hf{ U,  V)  =  2~n  £  £  ^(y)+!x.Cr(y)(_1)u.x®v.y 
xeZ"  yeZ" 

=  2-«X^y)(-iryZ 

yeZj  xeZj} 

=  X  f  g(y)(— l)vy</>{0}(u  ©  cr(y))  =  ^r'W+lw'W, 
yeZj 

and  the  theorem  is  proved.  □ 
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In  Sect.  7  (Conclusion  and  open  problems)  of  [16],  Sole  and  Tokareva  mentioned  that 
although  there  are  analogues  of  Maiorana-MacFarland  type  construction  in  the  context  of 
quaternary  Boolean  functions  and  generalized  Boolean  functions  [10,15],  no  construction 
has  been  proposed,  which  would  generalize  Dillon’s  partial-spreads  type  bent  functions  [8]. 
We  propose  such  a  construction,  thus  answering  the  challenge  by  Sole  and  Tokareva  [16]. 

Let  n  =  2t.  Suppose  that  Et  (i  =  1,  . . . ,  2t  +  1)  are  t -dimensional  subspaces  of  ZJJ  with 
Et  D  Ej  =  {0},  if  i  ^  j  (it  also  follows  that  Ej~  Pi  Ej-  =  {0},  if  i  ^  j).  It  is  also  noted  that  in 

this  case  U?^1  Et  =  U =  ZJJ.  In  the  following  theorem  we  propose  a  class  of  gbent 
functions  which  we  refer  to  as  the  generalized  Dillon  class  (GD). 

Theorem  9  Let  n  =  2t  and  k,m\,  my+i  he  integers  such  that  X/=V  f Mi  =  Let 
F  :  ZJJ  —>  C  he  given  by 

2f  +  l 

F(x)  =  ^  ?Wf02j;.(x),  for  all  x  g  If2. 
i= 1 

Then  the  function  f  :  ZJJ  — >  7Lq  defined  by 

f /(x)  =  F  (x)  for  all  xe  Zn2  (8) 

is  a  gbent  function. 


Proof  We  compute 


2?  +  l 

Uf{ u)  =  2-f  X  ?/W (_!)"■*  =  2-'  X  F(x)(-l)ux  =  2~f  X  X  «(-l)ux 

xeZj  xeZ^  xeZj  i= 1 

2f+l  2?+l 

=  2-f  ^  r-'  X  <MX)(-Dux  =  2-;  X  Xt-1^ 

i= 1  xeZ^  i=l  xeE; 

2f+l 

=  2-?  x  r-'2V£x(u) 

i= 1 


2'  +  l 

=  x  r"0,x(U) 

/=i 


ifue£/-\{0}, 
if  u  =  0, 


which  proves  that  /  is  a  generalized  bent  function. 


□ 


Carlet  [2]  introduced  the  generalized  partial  spreads  class  (GPS)  of  bent  functions  and 
conjectured  that  any  bent  function  belongs  to  G  PS.  This  conjecture  was  proved  in  affirmative 
by  Carlet  and  Guillot  [3].  A  similar  construction  which  provides  a  unique  representation  of 
bent  functions  was  proposed  by  Carlet  and  Guillot  [4].  Below  we  introduce  a  class  for  gbent 
functions  which  we  refer  to  as  the  generalized  spreads  class  (GS).  We  demonstrate  that  the 
Dillon  type  gbent  functions  as  well  as  generalized  Maiorana-McFarland  type  bent  functions 
belong  toGS.  The  question  whether  any  gbent  function  is  in  G S  remains  open. 

Let  n  =  2 1.  Suppose  that  E\, . . . ,  E^  are  t-dimensional  subspaces  of  Z^  such  that 

U?=1£.-=uf=1£iL  =  Z2-  (9) 


For  each  x  e  ZJ  we  define  the  following  two  sets 

£x  =  {Ei  :  x  g  Ei)  and  Sx  =  {Ef-  :  x  g  Ej~}.  (10) 
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Theorem  10  Let  m\ ,  . . . ,  g  Z  and  F  :  ^  C  be  defined  by 

k 

F(x)  =  ^  f mi(/>Ei  00  for  all  x  gZJ.  (11) 

/=i 

Suppose  that 

X  f"'.  X  e{^':  7=0,1,...  ,<?-l},  /or  a/ZxeZ”.  (12) 

{/:£/€£*} 

TTz^n  the  function  f  '.U^^  Zq  defined  by 

p(x>  =  F(x),  for  all  x  €  Zn2,  (13) 

is  a  gbent  function.  The  class  of  such  functions  is  referred  to  as  the  generalized  spreads  class 
(GS). 

Proof  Suppose  /  g  QBn  satisfies  (13).  Then 

Hf( u)  =  2~nl2  X  £/(x)(-l)ux  =  2~n'2  X  f’(x)(-l)ux 

xeZJJ  xeZJJ 

k  k 

=  2-"'2  X  Xri</>£i(x)(-l)ux  =  2~nl2  X  X  ^(x)(-DUX  (14) 

xeZ[J  i= 1  i=l  xeZ^ 

£  A: 

=  2-,/2X"‘  I(-1r  =  Ir>£i(u)=  X 

*=1  »=1  {z:£be£^} 

Therefore  any  function  f  e  QB^  satisfying  (11)  is  gbent  if  the  condition  (12)  is  satisfied.  □ 

Since  the  only  units  in  the  ring  of  Gaussian  integers  are  d=  1 ,  =h ,  we  have  the  next  corollary, 
for  the  case  q  =  4. 

Corollary  11  Let  m\,  . . .  ,ntk  €  Z  and  F  :  ZJJ  — >  C  be  defined  by  F(x)  = 

Xf=i  imi <pEi(*)  far  all  x  G  Z^.  The  function  f  :  Z2  — >  Z4  defined  by  = 

Fix)  for  all  x  g  ZJJ  w  <2  gbent  function  if  and  only  if  X{i:£fe£x} G 
(=bl,  ±1},  for  all  x  €  Z". 

The  fact  that  integers  k,  m\,  m2,  . . . ,  m2?+i  exist  (at  least  for  g  even)  such  that 
f  *  is  guaranteed  by  the  main  result  of  Lam  and  Leung  [12,  Main  Theo¬ 
rem],  which  we  briefly  state  below.  For  any  given  q ,  let  W(q)  be  the  set  of  weights  i  for 
which  there  exist  m;  with  X;=i  —  0.  Lam  and  Leung  showed  that,  if  q  =  YYi=i  P?1  > 

then  W(q)  =  p\N  H - b  prN.  Thus,  in  our  case,  if  q  =  YYi=i  P ^  is  even,  and  so,  p\  =  2, 

then  2t  +  2  =  2(2t~l  +  1)  g  IT(g)  =  2N  +  •  •  •  +  prN.  It  follows  that  there  exist  m/, 

1  <  /  <  2?  +2,  such  that  X^=i2  K m  —  0,  and  so,  ?m‘  —  —  f2?+2  =  ^/2+2?+2?  using 

the  fact  that  f  ^/2  =  —1,  which  shows  our  claim. 

Below  we  demonstrate  that  GD  and  GMMF  both  are  contained  in  GS.  Our  proof  is 
similar  to  the  proof  by  Carlet  [2]  in  the  Boolean  case. 

Theorem  12  The  generalized  Dillon  and  generalized  Maiorana-McFarland  classes  are  both 
contained  in  the  generalized  spreads  class  (i.e.,  GD  U  GMMF  C  GS). 
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Proof  First,  it  can  be  directly  checked  that,  for  generalized  Dillon  type  gbent  functions  with 
mi, ... ,  m2*+i,  k  e  Z  such  that  X/LV  Ei  H  Ej  =  {0}  and  Pi  Ej~  =  {0}  if 

i  j,  the  Eq.  12  are  satisfied  by  the  subspaces  Ef  s  and  s.  Therefore,  GD  c  GS. 

Next,  we  concentrate  on  the  G MM E  and  assume  q  to  be  an  even  positive  integer.  Without 
loss  of  generality,  we  assume  a(0)  =  0.  Consider  the  following  t-dimensional  subspaces, 

Ei  =  aiz)1  x  {0,  z},  ^ 

Kz  =  {ail)1-  x  {0})  U  ((Z^\(ff(z)-L))  x  {z}), 

for  all  z  €  Z^\{0}.  The  duals  of  the  above  subspaces  are  as  follows: 

E^  =  {0,  or(z)}  X  Z1, 

(16) 

=  ({0}  x  z1)  U  ({cr (z) }  x  (ZJ,\zx)). 


for  all  z  e  Z2\{0}.  Let 


F(\,y)=  ^  ^(zVi?z(x,y)  +  (-?*(z))^,(x.  y)  +  ^(0Vz' x<0)(x, y). 


zeZf,\{0}  zeZ^\{0} 

for  all  x,  y  e  Z^.  We  observe  that  when  y  ^  0 


(17) 


E(x,  y) 


f*(y),  if  x  G  criy)1- 
S !+«(y),  if x  €  Z^\ff(y)x. 


When  y  =  0  we  observe  that  (x,  0)  e  Ez  if  and  only  if  (x,  0)  E  Kz.  Therefore  for  all  x  e  Z2, 
F(x,  0)  =  Thus,  the  function 


/(x,  y)  =  |x-ff(y)  +  g(y) 

satisfies  F(x,  y)  =  for  all  x,  y  e  Z2.  This  proves  that  GMME  c  GS.  □ 


6  A  characterization  of  generalized  bent  functions  in 


In  this  section  we  start  by  giving  the  crosscorrelation  spectrum  of  any  two  Dillon  type  func¬ 
tions  in  Suppose  that  n  =  2t  and  Ei  (i  =  1, . . . ,  2*  +  1)  are  t -dimensional  subspaces 
of  Z2  with  Ei  fl  Ej  =  {0},  if  i  7^  j. 


Theorem  13  Suppose  f  and  g  are  two  Dillon  type  generalized  bent  functions  from  Z2  to 


Z4  such  that  ifW  =  X^1 


1 ai 4>e{  (x)  and  i8^  =  ibi4>Ei  (x)  for  all  x  g  Z2  and 

VTtx  Zf=+i \j¥4  'ai~bj  = 


2  fai-bi,  if  u^0 


2  tik~l,  if  u  =  0. 


(18) 
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Proof  Using  Theorem  9  we  obtain  Hf(u)  =  0 E x  (u)  an<^  ^8 (u)  —  0 e l 

(u).  The  crosscorrelation  of  /  and  g  at  u  e  ZJ 


/2'  +  l 


C/,,(u)  =  X  W/(u)Wg(u)(-l)M  =  Z  Z'^^  Z'fc'^(xd(-|)U' 


2?  +  l 

Z 

i=l 


=  Z  Z  =  Z  Z  (-1)1” 

xeZ^  i=l  i=l  xe£b 

2f+l 

/=1 
2?  +  l 


09) 


/=1 


2ria,‘  ifue^-, 
2hk~l,  if  u  =  0. 


Therefore  for  all  u  G  ZJJ  we  have  \Cfig(u)\  =  2l . 


Next,  we  compute  the  crosscorrelation  of  two  arbitrary  generalized  Boolean  functions  in 
GB„  in  terms  of  the  crosscorrelation  of  their  component  Boolean  functions.  As  corollaries  to 
the  theorem  proved  below  we  provide  alternative  proofs  of  some  results  proved  by  Sole  and 
Tokareva  [16]. 

Theorem  14  Suppose  f  and  g  are  two  generalized  Boolean  functions  from  Z^  to  Z4  such 
that  /(x)  =  a\(x)  +  2b\(x)  and  g(x)  =  <22  (x)  +  2b2(x),  where  <2;,  bi(i  =  1,2)  are  Boolean 
functions  from  Z! \  to  Z2.  Then  the  crosscorrelation  between  f  and  g  at  u  g  ZJJ  is 

Cf,g(u)  —  ~  (Cz?i,Z?2  (u)  T  C -\~b\ ,ci2~\~b2  (u) ^  +  —  (f-'bi ,ci2~\~b2  (^)  —  Cai+b\,b2  (u))  • 

Assume  that  f  :  ZJJ  — >  Z4,  and  wnte  it  as  fix)  =  a(x)  +  2b  {x),  where  a ,  d  are  Boolean 
functions  from  Zi ^  to  Z2.  TTzen  dre  autocorrelation  of  f  at  u  eZj  A 

C/(u)  =  i  (C*(u)  +  Cfl+^,(u)) . 

The  function  f  e  GB„  is  generalized  bent  if  and  only  if  the  functions  b  and  a  +  b  have 
complementary  autocorrelation,  that  is, 

Cb (u)  +  Ca+b{ u)  =  0  for  all  u  €  Z"\{0}. 


Proof  We  compute 


<?/,«(«) 


^  z/(x)-g(x©u)  _  ^  ^i(x)-a2(x©u)^_^^i(x)©Z?2(x©u) 
xeZJJ  xeZj} 

2  {pb\,b2  (u)  “1“  ^l+Z?l,<32+^2  (U))  "I”  2  (^l>fl2+^2^)  _  ^a\+b\  ,b2  (u))  • 


(20) 


j  1  _i_/_  1  \a+b  i 1  \b / i\a 

which  follows  directly  from  the  formula  ia~D  =  v  - b  1 — —  1,  for  all  a,  b  g 

{0,  1}. 

The  second  part  follows  from  (20)  by  setting  /  =  g  (that  is,  a\  =  02  =  a  and 
b\  =  /?2  =  d).  □ 
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The  following  corollary  is  Theorem  32  proved  by  Sole  and  Tokareva  [16]. 

Corollary  15  Suppose  n  is  a  positive  even  integer  and  f  g  GB„,  a,b  g  Bn  such  that 
fix)  =  a(x)  +  2b  (x)  for  all  xgZJ.  Then  the  following  statements  are  equivalent: 

(/)  The  generalized  Boolean  function  f  G  is  gbent; 

(i  i )  The  n -variable  Boolean  functions  b  and  a  +  b  are  both  bent. 

Proof  Suppose  /  G  QB„  is  gbent.  Therefore,  by  Theorem  14  the  functions  b,a  +  b  have 
complementary  autocorrelations  which  implies  that  both  b,  a  +  b  are  bent  functions  ( n  is 
even). 

Conversely,  if  b  and  a  +  b  are  bent  functions  they  have  complementary  autocorrelations, 
and  so,  by  Theorem  14,  /  is  gbent.  □ 

Next  we  give  an  alternate  proof  of  Corollary  43  and  a  slightly  generalized  version  of  its 
converse  presented  in  Proposition  44  by  Sole  and  Tokareva  [16]. 

Corollary  16  Suppose  f  g  GB„,  where  /(x)  =  a(x)  +  2b  (x)  for  all  x  G  ZJJ  /or  some 
a,  b  G  #n.  The  function  f  is  gbent  if  and  only  if 

(/)  i/s(f)  w  if  n  is  odd. 

(i  i )  \/f  (/)  w  semibent,  ifn  is  even  and  b  and  a  +  b  have  complementary  autocorrelation. 

Proof  Let  n  be  an  odd  positive  integer.  Suppose  /  g  QB„  is  gbent.  Theorem  14  implies 
that  b  and  a  +  b  have  complementary  autocorrelation.  Therefore  by  Theorem  4.2  of  [14]  the 
function  /’(/)  £  Bn+\  is  bent. 

Conversely,  we  suppose  that  the  function  \jf{f)  £  Bn+\  is  bent.  Then,  by  Theorem  4.2 
of  [14],  b  and  a  +  b  have  complementary  autocorrelation.  Therefore,  by  Theorem  14  /  is 
gbent. 

Let  n  be  an  even  positive  integer.  Suppose  that  f  e  GB„  is  gbent.  This  implies  that  b  and 
a  +  b  have  complementary  autocorrelation,  which  in  turn  implies  that  b  and  a  +  b  both  are 
bent  functions.  Therefore  i/r(f)  is  a  semibent  function. 

Conversely,  we  suppose  that  /’(/)  is  a  semibent  function.  Let  b(x)  =  ^(/)( 0,  x)  and 
a(x)  +  b(x)  =  ^(/)(  1,  x),  for  all  x  g  ZJJ.  In  this  case,  it  is  to  be  noted  that  b  and  a  +  b  may 
or  may  not  have  complementary  autocorrelation.  Therefore,  by  Theorem  14,  the  function  / 
is  gbent  if  b  and  a  +  b  have  complementary  autocorrelation,  otherwise  /  is  not  gbent.  □ 


7  A  characterization  of  generalized  bent  functions  in 

In  this  section  we  extend  the  result  of  Sole  and  Tokareva  [16]  to  generalized  Boolean  func¬ 
tions  from  into  Zg.  Let  f  =  e2jTl/s  =  ^(1  +  1)  be  the  8-primitive  root  of  unity.  Let 
/  :  Z2  — ►  Zg  be  as  in  (1),  that  is, 

/(x)  =  a0(x) +ai(x)2 +  a2(x)22,  (21) 

where  a*  (x)  are  Boolean  functions,  and  ‘+’  is  the  addition  modulo  8.  The  next  lemma  is  a  par¬ 
ticular  case  of  Theorem  2,  which  gives  the  connection  between  Walsh-Hadamard  transforms 
of  /  and  its  components  as  in  (21). 

Lemma  17  Let  f  ^QB\  as  in  (21).  Then, 

4Hf(u)  =  ot0Wa2(  u)  +  ai  WaO0tf2(u)  +  o^W^e^u)  +  a3  Wflo0fll0fl2(u), 

where  ao  =  1  +  (1  +  \[2 )i,  ol\  =  1  +  (1  —  >/2)i,  a?2  =  1  +  s/2  —  i,  a3  =  1  —  \]~2  —  i. 


<£)  Springer 


Bent  and  generalized  bent  Boolean  functions 


Corollary  18  With  the  notations  of  the  previous  lemma ,  we  have 

4V2|^/(u)|2  =  W2  -  X2  +  2 XY  +  Y2  -  2 WZ  -  Z2  +  Vi (W2  +  X2  +  T2  +  Z2), 

(22) 

where,  we  use  for  brevity,  W  :=  W«2(u),  X  :=  W«0©fl2(u),  Y  :=  ^©^(u),  Z  := 
Wao®0i©fl2  (u)- 

Proof  By  replacing  of,- ,  f  by  their  complex  representations,  the  corollary  follows  in  a  rather 
straightforward,  albeit  tedious  manner.  □ 

Theorem  19  Let  f  €  QB*  as  in  (21).  Then: 

(0  If  n  is  even,  then  f  is  gbent  if  and  only  if  a2,  ao  0  a2,  a\  ®  a2,  ao  ®  a\  ®  a2  are  all 
bent,  and  (*):  Wao®a2(u)  Wai®a2(u)  =  Wa2(u) Wao®ai(Ba2(u),  for  all  u  €  Z^; 

(ii)  Ifn  is  odd,  then  f  is  gbent  if  and  only  ifa2,  ao  ®^2,  a\  ®£*2,  ao  ®a\  ®^2  are  semibent 
satisfying  (**):  Wao@a2( u)  =  Wa2( u)  =  0  and  |Wai©a2(u)|  =  |  Wao©ai0a2(u)|  = 
V2;  or,  |  Wi^©^  (u)  |  =  |  W^2  (u)  |  =  Viand  Waiea2(  u)  =  Wflo0fll0fl2(u)  =  0 ,  for 
all  u  €  Zjf. 

Proof  We  use  the  W,  X,  Y,  Z  notations  of  Corollary  18.  First,  assume  that  a2,  ao  ®  a2,  a\  ® 
a2 ,  ao  ®a\  ®«2  are  all  bent  (respectively,  semibent).  Then,  replacing  the  corresponding  values 
of  the  Walsh-Hadamard  transforms  in  Eq.  22  and  using  the  imposed  condition  (*)  (respec¬ 
tively,  condition  (**))  on  the  Walsh-Hadamard  coefficients,  we  obtain  4\/2|7Y/(u)|2  = 
4^2,  and  so,  \H/(u)\  =  1,  that  is,  /  is  gbent. 

Conversely,  we  assume  that  /  is  gbent,  and  so, 

4V2  =  W2  -  X2  +  2Xy  +  Y2  -  2WZ  -  Z2  +  V^W2  +  X2  +  Y2  +  Z2), 

which  prompts  the  system 

W2  -  X2  +  2 XY  +  Y2  -  2 WZ  -  Z2  =  0  (23) 

W2  +  X2  +  Y2  +  Z2  =  4.  (24) 

We  are  looking  for  solutions  in  2-"/2  Z  (a  subset  of  Q,  if  n  is  even  or  -J2  Q,  if  n  is  odd). 

We  look  at  Eq.  24,  initially,  and  apply  Jacobi’s  four  squares  theorem  (see  [9]). 

Case  (i).  Let  n  =  2k  be  even.  Thus,  W,  X,  Y,  Z  are  all  rational  (certainly,  not  all  0).  Write 

W  =  2 ~n/2W',  X  =  2 ~n!2X',  Y  =  2rn!2Y',  Z  =  2 ~nl2Z' ,  and  replace  (23)  and  (24)  by 

the  system  in  integers 

W'2  _  x’2  +  2 X’Y'  +  Y'2  -  2 W'Z'  -  Z'2  =  0  (25) 

W'2  +  X'2  +  Y'2  +  Z'2  =  2lk+2.  (26) 


Now,  by  Jacobi’s  four-squares  theorem,  we  know  there  are  exactly  24  solutions  of  (26), 
which  are  all  variations  in  d=  sign  and  order  of  (d=2*,  ±2k ,  ±2k ,  ±2k)  or  (±2^+1, 0,  0,  0). 
Further,  it  is  straightforward  to  check  that  among  these  24  solutions,  only  the  eight  tuples 
(. X ' ,  Y',  W Z')  in  the  list  below  are  also  satisfying  Eq.  25, 


(~2k,  -2k, 

(2k,  -2k,  - 


—2k,  —2k),  (2k,  2k,  —2 

2k,  2k),  {—2k,  2k,  2k,  - 


k 

■2k 


—2k),  (—2k,  —2k,  2k,  2k),  (—2k,  2k,  - 
),(2k,-2k,2k,-2k),(2k,2k,2k,2k). 


2k,2k), 


This  implies  that  (X,  Y,  W,  Z)  e  2  "/2Z4  are  any  of  the  following: 

(-1,  -1,  -1,  -1),  (1,  1,  -1,  -1),  (-1,  -1,  1,  1),  (-1,  1,  -1,  1), 
(1,  -1,  -1,  1),  (-1,  1,  1,  -1),  (1,  -1,  1,  -1),  (1,  1,  1,  1), 
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and  (/)  is  shown  (one  can  check  easily  that  these  solutions  also  satisfy  condition  (*)). 

Case  (ii).  Let  n  =  2k  +  1  be  odd.  Then,  at  least  one  of  X ,  Y ,  W ,  Z  is  nonzero  and  belongs 
to  V2Q).  As  before,  write  W  =  2 ~nl2W' ,  X  =  2~nl2X',  Y  =  2 ~"/2Y\  Z  =  2 ~nl2Z',  and 
replace  (23)  and  (24)  by  the  system  in  integers 


W'2  -  X'2  +  2 X'Y’  +  Y'2  -  2 W'Z'  -  Z'2  =  0 
W12  +  X'2  +  Y'2  +  Z'2  =  2  •  l2h+2, 


(28) 

(29) 


and  so,  by  Jacobi’s  four-squares  theorem,  Eq.  29  has  exactly  24  solutions,  which  are  all  vari¬ 
ations  in  d=  sign  and  order  of  (=L2^+1,  =L2^+1,  0,  0).  Further,  it  is  straightforward  to  check 
that  among  these  24  solutions,  the  eight  tuples  ( Xf ,  Yf,  W' ,  Z')  in  the  list  below  are  also 
satisfying  Eq.  28, 


Thus,  the  solutions  ( X ,  Y,  W,  Z )  to  (23)  and  (24)  are 

(0,  V2, 0,  V2),  (0,  V2.  0,  -V2),  (0,  -V2,  0,  V2),  (0,  -V2,  0,  -V2), 
(V2,  0,  V2,  0),  (V2,  0,  —  V2,  0),  (-V2, 0,  0),  (-V2,  0,  -4l,  0), 


which  also  satisfy  condition  (**).  The  converse  is  immediate,  and  (ii)  is  shown. 


□ 


Example  20  A  set  of  Boolean  functions  is  called  a  bent  set  if  the  sum  of  any  two  dif¬ 
ferent  elements  of  the  set  is  a  bent  function.  Proposition  1  of  [1]  shows  the  existence  of 
a  bent  set  (based  on  a  vectorial  bent  function  F  :  ►  F|)  of  cardinality  2k,  namely 

{Fv  :¥%  — ►  F2,  Fv(x)  =  v  ■  F(x)J,  which  is  also  closed  under  addition.  Taking  any  such 
bent  set  of  cardinality  >  4,  say  S  =  {/o,  /1,  /2,  fs, . . .},  define  ao  =  /o  ®  /1, 01  = 
Zb  ©  /2»  ^2  =  /o  ©  /3,  which  satisfy  the  conditions  of  Theorem  19(a),  because  S  is  a  bent 
set  closed  under  addition. 

Example  21  Let  n  =  It.  A  polynomial  F(X)  €  F2 t[X]  is  said  to  be  a  complete  mapping 
polynomial  if  F(X)  and  F(X)  +  X  both  correspond  to  permutations  on  ¥2*',  let  us  denote 
the  permutation  corresponding  to  F(X)  by  ttf-  We  establish  an  isomorphism  between  F2^ 
and  F2  and  consider  the  permutation  ttf  as  a  mapping  from  F2  to  F^.  Let  ao,  a\  and  a2  be 
defined  as  follows: 

<20(x,  y)  =  x  •  y  for  all  x,  y  e  Ff>, 
a\  (x,  y)  =  x  •  y  for  all  x,  y  €  F^, 

(22 (x,  y)  =  7T f  (x)  •  y  for  all  x,ye  F^. 

Since  up  is  associated  to  a  complete  mapping  polynomial  all  the  functions  ^2,  ©«2»  ©^2 
and  ao  ©  a\  ©  a2  are  Maiorana-McFarland  type  bent  functions.  Further,  Wrfl0©fl2( u,  v)  = 
Wai®a2( u,  v)  for  all  u,  v  g  F^,  which  implies  that  Wflo0fl2(u,  v) W«10fl2(u,  v)  =  2n  for 
all  u,  v  €  Ff>,  whereas  ao  ©  a\  ©  a2  =  implies  that  Wa2( u,  v)W^o0ai0a2(u,  v)  =  2n 
all  u,  v  €  F^.  Thus,  we  obtain  bent  functions  ao,  a\  and  <22  which  satisfy  the  conditions  of 
Theorem  19  for  the  even  case.  For  details  on  complete  mapping  polynomials  we  refer  to  [1 1]. 

8  Constructions  of  generalized  bent  functions  in 

In  this  section  we  characterize  and  define  several  classes  of  gbent  Boolean  functions. 
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Theorem  22  If  f  :  Z2+2  (n  even)  is  given  by 

/(x,  y,  z)  =  4c (x)  +  (4<2(x)  +  2c(x)  +  1  )y  +  (4 b(x)  +  2c(x)  +  1  )z  -  2 yz, 
where  a,  b,  c  e  Bn  such  that  all  a,  b,  c,  a  ®  c,  b  0  c  and  a  0  b  are  bent  satisfying 

Wa(x)Wb(x)  +  Wa®c(x)Wb(Bc(x)  =  -2  Waeb(x)Wc(x)),  for  all  x  e  Zn2,  (30) 
then  f  is  gbent  in  QB^n+2. 


Proof  We  compute  the  Walsh-Hadamard  coefficients  (using  that  f  = 


^(1  +  0  and  £2  =  ;) 


2in+2)/2Hf(u,v,w)  =  X  gf(x,y,z)^_iyi-x@vy@wz 

(x,y,z)eZ"+2 


=  X  dc(x)(-DB 


:  X 

(y,z)sZ% 


K 


(4a(x)+2c(x)+l);y+(4&(x)+2c(x)+l)z-2yz 


(-1) 


vy®wz 


=  X  (-l)e(x)ffiu'x  p  +  (-l)>'(-i)«W^Wf  +  (_!)«> (_i)*«,c(x)f 

xeZ% 

\  ^a(x)®b(x)(Bc(x)®v®w\ 


Applying  Eq.  3  with  (z,  s)  =  (i,  c(x)),  that  is,  ic^  =  1+(  ^  (  -  +  1  (  ( }  i,  we  obtain 


2Hf(u,  v,  w )  =  Wc  (u)  +  (Wa(Bc(u)  +  Wa(  u)  +iWaec( u)  -iWa(  u)) 

+  0*W(u)  +  Wfe(u)  +  !%c(u)  -  iW6(u))  +  (-l)v<BwWaeb(u) 

=  Wc{  u)  +  Z^!(Wa(u)  +  *  Wa0c(u))  +  ^Z(Wfe(u)  +  i  WW(u)) 


V2 


V2 


Therefore,  the  real  and  the  imaginary  parts  of  7f/(u,  v,  w)  are 

(-irwa(u)  +  (-irwfe(u) 


ReCHf( u,  w,  «,))  =  Wc(u)  +  (-l)’®"fffl9i(u)  + 

(-irWaec(u)  +  (-l)wWfe0c(u) 


V2 


v,  w)) 

and  so, 


V2 


4|H/(u,  w,  tn)|2  =  1  (Wfl(u)2  +  Wb( u)2  +  Wa0c(u)2  +  Wi0e(u)2 
+2We(u)2  +  2Wa0fe(u)2) 

+  (-l)t,+t"(Wa(u)lTfe(u)  +  Waec(u)Wbec(  u)  +  2Wc(u)Wa0fe(u)) 

+  V2  ((-l)°(W’fl(u)Wc(u)  +  W*(u)Wae6(u))  +  (-l)“(W6(u)Wc(u) 
+Wfl(u)Wfl0*(u))) 


Since  a,  b,  c,  a  ®  c,  b  ®  c,  a  ®  b  are  all  bent  then  |  (u) |  =  |  Wb (u) |  =  |  Wc (u) |  = 
\Wa®b(v)\  =  |  Wfl0C(u)|  =  |Wfr©c(u)|  =  1.  Further,  from  the  imposed  conditions  on  these 
functions’  Walsh-Hadamard  coefficients,  we  see  that  Wa  (u)  Wb (u)  +  W«0C(u)  W^©c(u)  + 
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2Wc(u)Waeb(u)  =  0,  and  also  Wfl(u)Wc(u)  +  Wb(u) Waeb(u)  =  0,  Wb(u)Wc(u)  + 
Wfl(u) Wa®b(u)  =  0  (that  is  because  if  W^u)  and  Wb( u)  have  the  same  sign,  then 
Wc(u),  Wa®b  have  opposite  signs;  further,  Wa( u)  and  Wb{ u)  have  opposite  signs,  then 
Wc(u),  Wa®b  have  the  same  sign).  Using  these  equations,  we  get  that  4|7Y/(u,  v,  w)\2  =  4, 
and  so,  /  is  gbent. 

□ 

Remark  23  It  is  rather  straightforward  to  see  that  condition  (30)  has  16  solutions.  More 
precisely,  (Wfl(x),  W^(x),  W«©c(x),  W^©c,  Wa®b(x),  Wc(x))  could  be  any  of  the  following 
tuples: 

(-1,  -1,  -1,  -1,  -1,  1);  (-1,  -1,  -1,  -1,  1,  -1);  (-1,  1,  1,  1,  -1,  1);  (-1,  -1,  1,  1,  1,  -1); 

(-1,  1,  -1,  1,  -1,  -1);  (-1,  1,  -1,  1,  1,  1);  (-1,  1,  1,  -1,  1,  -1);  (-1,  1,  1,  -1,  1,  1); 

(1,  -1,  -1,  1,  -1,  -1);  (1,  -1,  -1,  1,  1,  1);  (1,  -1,  1,  -1,  1,  -1);  (1,  -1,  1,  -1,  1,  1); 

(1,  1,  -1,  -1,  -1,  1);  (1,  1,  -1,  -1,  1,  -1);  (1,  1,  1,  1,  -1,  1);  (1,  1,  1,  1,  1,  -1). 

Theorem  24  If  f  :  Z^+2  ~^7L%(n  even )  is  given  by 

fe  (x,  y,  z)  =  4 c(x)  +  (4(2 (x)  +  1  )y  +  (4 b(x)  +  1  )z  +  2eyz,  (32) 

where  €  e  (1,  —  1},  a,  b,  c  e  Bn  such  that  all  c,  a  0  c,  b  0  c  and  a  ®b  ®  c  are  bent,  with 
Waec(u)Wbec(n)  +  eWc(u)Waeb®c(u)  =  0,  for  all  u  €  Z",  (33) 

then  f  is  gbent  in  2- 

Proof  As  in  the  proof  of  Theorem  22,  we  compute  the  Walsh-Hadamard  coefficients,  obtain¬ 
ing 


2Hp  (u,  v,  w) 

=  WC(U)  +  (~l)vi;Wa(Sc(u)  +  (  —  WbQc (u)  +  (_1)»®^2+2*  wa(Bb(Bc(u) 

,  ,  (-l)»ffo9c(u)  +  (-irwtec(u) 

=  Wc(u)  -  €(-l)l'®u'Wfl©fe®c(u)  H - 

(-l)^fl©e(u)  +  (-l)u’W;,©c(u) 


V2 


+  l  - 


C2 


using  the  fact  that  f2+2e  =  —  e,  for  e  e  {1,-1}.  Taking  the  square  of  the  complex  norm,  we 
get 


4|7f/e(u,  v,  w) I2  =  Wa©c(u)2  +  Wb9c(u)2  +  We(u)2  +  Wa9b(Bc( u)2 

+2(—l)v+w  (Wa(Bc(u)Wbec(u)  +  €Wc(u)Wambec(u)) 
+V2  ((—  l)v(Wa@c (u) Wc (u)  +  €Wb(Bc(u)Wa(Bmc(u)) 
+(-ir(Wi,ec(u)Wc(u)  +  e  Wa®c  (u)  Wa®b®c  (u) ))  =  4, 


because  c,  a  ®  c,  b  ®  c  and  a  ®  b  ®  c  are  all  bent,  so  their  Walsh-Hadamard  coefficients  are  1  in 
absolute  values,  and  Eq.  33  implies  that  the  remaining  coefficients  are  all  0  (that  can  be  seen 
by  the  following  argument:  if  A,  B,C,  D  e  {±1},  and  AB  +  CD  =  0,  then  by  multiplying 
by  BC ,  we  get  AC  +  BD  =  0,  and  by  multiplying  by  AC  we  get  B C  +  AD  =  0). 

Therefore,  [Hp  (u,  v,  w)\2  =  1,  so  /  is  gbent,  and  the  theorem  is  proved.  □ 


Remark  25  The  Eq.  33  has  8  solutions  (as  expected,  since  there  are  four  degrees  of  freedom 
and  one  constraint).  Moreover,  one  can  give  plenty  of  concrete  examples  of  functions  a,  b,  c 
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satisfying  the  conditions  of  our  theorem.  For  example,  if  6  =  —1,  one  could  take  in  Eq.  32, 
a  bent  Boolean  c,  and  a  =  b  such  that  c  ®  a  is  bent  (for  instance,  if  a  =  b  are  affine 
functions,  that  condition  is  immediate).  Then,  W^©c(u)W^®c(u)  +  eWc(u)  Wfl®z,®c(u)  = 
Wc®a( u)2  —  Wc( u)2  =  0,  and  so,  g  as  in  our  theorem  is  gbent. 

Theorem  26  Let  f  :  Z^+1  ->  Zs  (n  is  even)  be  given  by 

/(x,  y )  =  4c (x)  +  (4<2(x)  +  4c(x)  +  2 c)y,  (34) 

where  €  G  (1,  —  1}.  77*cn  /  w  gbent  in  if  and  only  if  a,  c  are  bent  in  Bn.  Moreover,  if 

g  is  given  by 

g(x,  y)  =  4 c(x)  +  {4a (x)  +  2c(x)  +  2 e)y,  (35) 

where  €  e  {1,-1 },  a,  c  e  Bn  such  that  a,c,  a  ®  c  are  all  bent,  then  g  is  gbent  in  QB\+V 
Further,  let  h  be  given  by 

h(x ,  y)  =  4 c(x)  +  (4a (x)  +  2e)y,  (36) 

where  e  G  (1,  —  1}.  Then  h  is  gbent  in  GB^+l  if  and  only  if  c,  a  ®  c  are  bent  in  Bn. 

Proof  We  will  show  the  first  claim,  since  the  proof  of  the  remaining  ones  are  absolutely 
similar.  As  in  the  proof  of  Theorem  22,  the  Walsh-Hadamard  coefficients  at  an  arbitrary 
input  (u,  v)  are 

V2Hf(u,  v )  =  We(u)  +  ie(-l)l’ira(u)  =  Wc(u)+€i(-l)vWa(u), 

and  so, 

2\Hf{u,v)\2  =  Wc(u)2 +  Wa(u)2. 

If  a ,  c  are  bent,  then  |  Wc(u)  |  =  |  (u)  |  =  1,  and  so  \H /  (u,  u)|  =  1,  that  is  /  is  gbent.  If  / 

is  gbent,  then  the  equation  Wc(u)2  +  Wa( u)2  =  2  has  as  rational  solutions  only  |  Wc(u)|  = 
\Wa(u)\  =  1,  and  so,  a,  c  are  bent.  □ 

Acknowledgement  We  gratefully  thank  the  reviewers  for  the  detailed  and  excellent  comments,  which 
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